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REMARKS 

Claims 1-32 were originally submitted. 
Claims 33-40 were previously added. 
Claims 16, 17, and 1 8 are currently amended 

Claims 1 and 7 are rejected under 35 U.S.C. § 102(e) as being anticipated by 
U.S. Patent No. 6,226,752 to Gupta et al (Gupta). 



Claim 2 is rejected under 35 U.S.C. § 103(a) as being unpatentable over 



Gupta. 

Claims 3-6 and 8-40 are rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Gupta in view of U.S. Patent No. 5,774,551 to Wu et al (Wu). 
Claims 1 -40 remain in this application. 



35 U.S.C. $102 

Claims 1 and 7 are rejected under 35 U.S.C. § 102(e) as being anticipated by 
U.S. Patent No. 6,226,752 to Gupta et al (Gupta). Applicants respectfully traverse 
the rejection of the claims. 

Independent claim 1 recites in part "expiring cookies from the browser in 
accordance with the request, wherein the cookies include data provided to the 
browser by the server". 

Gupta fails to teach or suggest the method of claim 1 . Gupta describes "[a] 
method and apparatus for authenticating users" (i.e., clients), where "[o]ne or more 
embodiments of the invention may utilize cookies to aid in the authentication 
process". See abstract of Gupta. 

Browsers may send (forward) requests and any associated cookies to the 
application server. Gupta, col 1 1 lines 46-48. "To locate a session, the cookie 
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that is forwarded from the browser may be examined and compared to sessions 
currently active. If no cookie is forwarded from the browser, the session is not 
valid". Gupta, col. 1 1 line 66 to col. 12 line 6. 

A user may issue a logout request to the server by entering a logout URL at 
the browser or clicking a link on the browser, to effectuate the logout, the 
browser may send the request to the server (i.e., application server and login 
server), and forward the associated cookie with the request. Gupta col. 1 3 lines 
45-51. The cookie identifies the user that is requesting the logout. 'Without the 
cookie, the server may not know who is requesting a logout." Gupta col. 13 lines 
54-55. 

The server determines if the cookie is valid. If the cookie is valid, the 
application server may invalidate the current session for the user and send back a 
notification to the browser that the user has been logged out. If the cookie is not 
valid, the server may do nothing further or may notify the user that the request 
cannot be processed. The cookie for the login server is transmitted to the client's 
browser. By storing the cookie, the login sever can determine if the client has been 
previously been authenticated, which overcomes the requirement of the client to 
have to reenter information. Gupta col. 13 lines 57-64. 

The server (i.e., login server) may force the user to logout because the time 
for the current session has expired. For example, if the user connection is 
terminated prior to logging out (e.g., user modem is turned off). The user is 
automatically logged out by terminating the session. To logout a user* the 
application server may check with the login server to see if the user session is still 
valid. If still valid, the application server may reset the time period for that 
session. If the session is no longer valid, the application server may destroy the 
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session causing the rejection of further requests from the user (browser). Gupta 
col 13 line 65 to col. 14 line 10. 

Claim 1 recites "expiring cookies from the browser in accordance with the 
request, wherein the cookies include data provided to the browser by the server". 

The Examiner maintains that "Gupta inherently teaches expiring cookies 
from the browser by teaching that the cookie (which contains the information 
regarding whether or not the user is logged in) is forwarded to the application 
server - by way of a browser - in order to invalidate (that is, to expire) the current 
session - which inherently requires the cookie to reflect the changed log-in status 
and thereby expire them". 

Applicants do not disagree with the Office in that Gupta teaches a cookie is 
forwarded (sent) from the browser and that current sessions are invalidated or 
expired. The cookie taught in Gupta is used to identify the user to the application 
server and login server. The cookie is used to login and/or validate the user by 
information to the server as to who the user is. Although sessions are expired, 
there is nothing in Gupta that teaches or shows that the cookie are expired. To 
expire cookies is counterintuitive to what is taught in Gupta. 

Gupta teaches a cookie that contains user information used to identify the 
user to the application server and login server* In fact, the purpose of a cookie is 
to identify a user to a server or website, where a user associated with the cookie 
has previously visited. If such a cookie is expired from the browser, there would 
be no cookie that the browser can send to the login server and "[w]ithout the 
cookie, the server may not know who is requesting a logout." Cookies are used to 
identify the user. 
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In performing a logout, Gupta relies on validating the user through the 
cookie that identifies the user. Therefore if the cookie is expired or retired, there 
would not be a cookie to send to allow the logout procedure. 

Gupta teaches that current sessions are expired t not cookies. The Examiner 
has assumed that if cookies are forwarded to an application server, that this 
inherently requires updating the cookie to reflect the changed log-in status and 
expires them (cookies). However, the cookies are never expired. To expire the 
cookies results in the inability to be able to authenticate or recognize users. 

The Examiner seemingly relies on personal knowledge without pointing to 

* 

any specific teaching. Specifically, the Examiner merely contends that if cookies 
are forwarded, they inherently update the cookie and thereby expire the cookie 
(previous cookie). The Examiner fails to point out where in Gupta it is taught 
"expiring cookies'*. 

According to 37 CFR §1.1 04(d)(2), "[w]hen a rejection in an application is 
based on facts within the personal knowledge of an employee of the office, the 
data shall be as specific as possible, and the reference must be supported, when 
called for by the applicant, by the affidavit of such employee, and such affidavit 
shall be subject to contradiction or explanation by the affidavits of the applicant 
and other persons." If this rejection is maintained on a similar basis in a 
subsequent action, the applicant respectfully requests the Examiner to supply such 
an affidavit to support this modification of Gupta. Otherwise, and without 
additional support, it is respectfully submitted the Action's conclusion does not 
represent the conclusion of a person of ordinary skill at the time of invention 
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Accordingly, Gupta does not show every element of claim 1, and the 
rejection of claim 1 is therefore improper* Accordingly, Applicants respectfully 
request that the §102 rejection of claim 1 be withdrawn. 

Independent claim 7 recites in part "causing a request for data from the 
server to be issued by the browser, wherein the request causes the server to expire 
cookies from the browser ". As discussed above in support of claim 1, Gupta fails 
to teach or show cookies that are expired from the browser. 

Accordingly, Gupta does not show every element of claim 7, and the 
rejection of claim 7 is therefore improper. Accordingly, Applicants respectfully 
request that the §102 rejection of claim 7 be withdrawn. 



35 U,S,C 8103 

Claim 2 is rejected under 35 U.S-C. § 103(a) as being unpatentable over 



Gupta. 

Dependent claim 2 depends from claim 1, and comprises the element 
"expiring cookies from the browser in accordance with the request, wherein the 
cookies include data provided to the browser by the server". 

As discussed above in support of claim 1, Gupta fails to teach expiring 
cookies from the browser, since doing so would defeat the teachings of Gupta to 
use a cookie to validate a user to a server. Without the cookie, as taught by Gupta, 
the user would not be able to perform a logout from the server. 

The Office maintains that it would have been obvious to one of ordinary 
skill in art to combine to acknowledge a successful logout as further recited in the 
element of claim 2 "wherein the request further causes the server to send an image 
to the browser which is indicative of successful logout". However, since Gupta 



17 



MSI-826USM04 



PAGE 19(29 ' RCVD AT 61612005 5:45:44 PM [Eastern Daylight Time] 1 SVR:USPT0-EFXRF-1/2 * DNIS:8729306 * CSID:509 323 8979 ' DURATION (mm-ss):0M8 



JUN 06 2005 15:11 FR LEE - HAYES PLL 



509 323 8979 TO 17038729306 



P. 20/29 



8 



10 



11 



12 



13 



14 



IS 



16 



17 



18 



19 



20 



21 



22 



23 



24 



25 



fails to teach or suggest expiring cookies from the browser, it would not have been 
obvious to combine Gupta with what the Office maintains as what was obvious to 
one of ordinary skill in the art* 

Accordingly, Gupta does not show every element of claim 2, and the 
rejection of claim 2 is therefore improper. Accordingly, Applicants respectfully 
request that the § 103 rejection of claim 2 be withdrawn. 



Claims 3-6 and 8-40 are rejected under 35 U.S.C. § 103(a) as being 
unpatentable over Gupta in view of U.S. Patent No. 5,774,551 to Wu et al (Wu). 

Dependent claim 3 depends from claim 1, and therefore comprises the 
element "expiring cookies from the browser in accordance with the request, 
wherein the cookies include data provided to the browser by the server". 

As discussed above in support of claim 1, Gupta fails to teach expiring 
cookies from the browser, since doing so would defeat the teachings of Gupta to 
use a cookie to validate a user to a server. Without the cookie, as taught by Gupta, 
the user would not be able to perform a logout from the server. 

The Office relies on Wu as teaching "the method wherein multiple servers 
are logged out by selection of a single logout link"* However, Wu provides no 
assistance in light of Gupta as to the recited method of claim 3. Since Gupta does 
not teach or suggest "expiring cookies from the browser in accordance with the 
request, wherein the cookies include data provided to the browser by the server", it 
would not have been obvious to combine 'the method wherein multiple servers are 
logged out by selection of a single logout link" as taught by Wu. 
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Accordingly, Gupta in view of Wu does not show every element of claim 3 
and the rejection of claim 3 is therefore improper. Accordingly, Applicants 
respectfully request that the § 1 03 rejection of claim 3 be withdrawn. 

Dependent claim 26 depends from claim 24, and therefore comprises the 
s clement "providing a link to an expire cookies page on each server in the form of 
an image source tag that when called causes each server to expire cookies on both 
the server and user's browser, and to provide an image back to the browser upon 
8 succeeding w logging out the user". 

As discussed above in support of claims 1 and 7, Gupta fails to teach 
io expiring cookies from the user's browser, since doing so would defeat the 
i i teachings of Gupta to use a cookie to validate a user to a server. Without the 

12 cookie, as taught by Gupta, the user would not be able to perform a logout from 

13 the server. 

14 The Office relies on Wu as teaching '*the method wherein multiple servers 
is are logged out by selection of a single logout link". However, Wu provides no 
i<3 assistance in light of Gupta as to the recited method of claim 26. Since Gupta does 
n not teach or suggest "... expire cookies on ... user's browser", it would not have 
is been obvious to combine "the method wherein multiple servers are logged out by 
19 selection of a single logout link" as taught by Wu. 

so Accordingly, Gupta in view of Wu does not show every element of claim 26 

21 and the rejection of claim 26 is therefore improper. Accordingly, Applicants 

22 respectfully request that the § 1 03 rejection of claim 26 be withdrawn. 

23 Dependent claim 4 depends from claim 1, and therefore comprises the 

24 element "expiring cookies from the browser in accordance with the request, 

25 wherein the cookies include data provided to the browser by the server". 
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As discussed above in support of claim 1 , Gupta fails to teach expiring 
cookies from the browser, since doing so would defeat the teachings of Gupta to 
use a cookie to validate a user to a server. Without the cookie, as taught by Gupta, 
the user would not be able to perform a logout from the server. 

The Office relies on Wu as teaching "the method wherein the logout link 
may be located on any of the multiple servers and an authentication server". 
However, Wu provides no assistance in light of Gupta as to the recited method of 
claim 4. Since Gupta does not teach or suggest "expiring cookies from the 
browser in accordance with the request, wherein (he cookies include data provided 
to the browser by the server", it would not have been obvious to combine "the 
method wherein the logout link may be located on any of the multiple servers and 
an authentication server" as taught by Wu. 

Accordingly, Gupta in view of Wu docs not show every clement of claim 4 
and the rejection of claim 4 is therefore improper. Accordingly, Applicants 
respectfully request that the §103 rejection of claim 4 be withdrawn. 

Dependent claim 5 depends from claim 1, and therefore comprises the 
element "expiring cookies from the browser in accordance with the request, 
wherein the cookies include data provided to the browser by the server". 

As discussed above in support of claim 1, Gupta fails to teach expiring 
cookies from the browser, since doing so would defeat the teachings of Gupta to 
use a cookie to validate a user to a server. Without the cookie, as taught by Gupta, 
the user would not be able to perform a logout from the server. 

The Office relies on Wu as teaching "the method wherein a visited sites 
cookie maintains a list of all sites logged into by the user". However, Wu provides 
no assistance in light of Gupta as to the recited method of claim 5. Since Gupta 
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does not teach or suggest "expiring cookies from the browser in accordance with 
the request, wherein the cookies include data provided to the browser by the 
server", it would not have been obvious to combine "the method wherein a visited 
sites cookie maintains a list of all sites logged into by the user" as taught by Wu* 

Accordingly, Gupta in view of Wu does not show every element of claim 5 
and the rejection of claim 5 is therefore improper. Accordingly, Applicants 
respectfully request that (he §103 rejection of claim 5 be withdrawn. 

Dependent claim 6 depends from claim 1, and therefore comprises the 
element "expiring cookies from the browser in accordance with the request, 
wherein the cookies include data provided to the browser by the server". 

As discussed above in support of claim 1, Gupta fails to teach expiring 
cookies from the browser, since doing so would defeat the teachings of Gupta to 
use a cookie to validate a user to a server. Without the cookie, as taught by Gupta, 
the user would not be able to perform a logout from the server. 

The Office relies on Wu as teaching "the method wherein selected cookies 
are expired to log out of the server". However, Wu provides no assistance in light 
of Gupta as to the recited method of claim 6. Since Gupta does not teach or 
suggest "expiring cookies from the browser in accordance with the request, 
wherein the cookies include data provided to the browser by the server", it would 
not have been obvious to combine "the method wherein selected cookies are 
expired to log out of the server" as taught by Wu. 

Accordingly, Gupta in view of Wu does not show every element of claim 6 
and the rejection of claim 6 is therefore improper. Accordingly, Applicants 
respectfully request that the §103 rejection of claim 6 be withdrawn. 
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Claims 8-9 are rejected for the same reasons as set forth in the rejection of 

claims 2-3. Applicants assert the arguments as presented in support of claims 2-3, 

in support of claims 8-9 . 

Accordingly, Gupta in view of Wu does not show every element of claims 
8-9 and the rejection of claims 8-9 is therefore improper. Accordingly, Applicants 
respectfully request that the §103 rejection of claims 8-9 be withdrawn. 

Claims 10, 15-18 and 24 are rejected for the same reasons as set forth in 
the rejection of claims 1-3. Claims 16, 17, and 18 have been amended to recite 



"expiring cookies". Applicants assert the arguments as presented in support of 
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claims 1-3, in support of claims 10, 15-18 and 24. 

Accordingly, Gupta in view of Wu does not show every element of claims 
10, 15-18 and 24 and the rejection of claims 10, 15-18 and 24 is therefore 
improper. Accordingly, Applicants respectfully request that the §103 rejection of 
claims 10. 15-18 and 24 be withdrawn. 

Claim 11 is rejected for the same reasons as set forth in the rejection of 
claims 1-3 and 5. Applicants assert the arguments as presented in support of 
claims 1-3 and 5, in support of claim 11. 

Accordingly, Gupta in view of Wu does not show every element of claim 1 1 
and the rejection of claim 11 is therefore improper. Accordingly, Applicants 
respectfully request that the §103 rejection of claim 1 1 be withdrawn. 

Claims 12, 13, 22, 23, 25, 28 and 33-40 are rejected for the same reasons 
as set forth in the rejection of claim 5. Applicants assert the arguments as 
presented in support of claims 5, in support of claims 12, 13, 22, 23, 25, 28 and 33- 
40. 
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Accordingly, Gupta in view of Wu does not show every element of claims 
13, 22, 23, 25, 28 and 33-40 and the rejection of claims 13, 22, 23, 25, 28 and 33- 
40 is therefore improper. Accordingly, Applicants respectfully request that the 
§103 rejection of claims 13, 22, 23, 25, 28 and 33-40 be withdrawn. 

Dependent claims 14 depends from claim 1 1 , and therefore comprises the 
element "a module that provides a Jink to an expire cookies page on each server 
that when called causes each server to expire cookies on the user's browser , and to 
provide an image back to the browser upon succeeding in logging the user out"* 

As discussed above in support of claims 1 and 7, Gupta fails to teach 
expiring cookies on the user's browser, since doing so would defeat the teachings 
of Gupta to use a cookie to validate a user to a server. Without the cookie, as 
taught by Gupta, the user would not be able to perform a logout from the server. 

The Office maintains that "[a]t the time the invention was made, it would 
have been obvious to a person of ordinary skill in the art to allow the request for a 
logout page to be initiated via more than one server page". However, this assertion 
by the Office provides no assistance in light of Gupta as to the recited system of 
claim 14. Since Gupta docs not teach or suggest *to expire cookies on the user's 
browser" it would not have been obvious to combine the Office's assertion. 

Accordingly, Gupta in view of the Office's assertion does not show every 
element of claim 14 and the rejection of claim 14 is therefore improper. 
Accordingly, Applicants respectfully request that the §103 rejection of claim 14 be 

withdrawn. 

Dependent claim 27 is rejected for the same reasons as set forth in the 
rejection of claim 14. Applicants assert the arguments as presented in support of 
claims 14, in support of claim 27. 
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Accordingly, Gupta in view of the Office's assertion does not show every 
element of claim 27 and the rejection of claim 27 is therefore improper. 
Accordingly* Applicants respectfully request that the §103 rejection of claim 27 be 
withdrawn. 

Dependent claim 19 depends from claim 18, and therefore comprises the 
element '^retiring cookies identified by responses to the get image requests". 

As discussed above in support of claims 1 and 7, Gupta fails to retiring 
cookies, since doing so would defeat the teachings of Gupta to use a cookie to 
validate a user to a server. Without the cookie, as taught by Gupta, the user would 
not be able to perform a logout from the server. 

The Office takes Official Notice "that a checkmark image is a symbol for 
affirmative, a positive result, or a task complete was well known in the art at the 
time the invention was made". However, the Official Notice taken provides no 
assistance in light of Gupta as to the recited method of claim 19. Since Gupta does 
not teach or suggest "retiring cookies identified by responses to the get image 
requests" it would not have been obvious to combine the Official Notice taken by 
the Office. 

Accordingly, Gupta in view of Official Notice does not show every element 
of claim 19 and the rejection of claim 19 is therefore improper. Accordingly, 
Applicants respectfully request that the §103 rejection of claim 19 be withdrawn. 

Dependent claim 20 depends from claim 18, and therefore comprises the 
element "retiring cookies identified by responses to the get image requests". 

As discussed above in support of claims 1 and 7, Gupta fails to retiring 
cookies, since doing so would defeat the teachings of Gupta to use a cookie to 
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validate a user to a server. Without the cookie, as taught by Gupta, the user would 
not be able to perform a logout from the server. 

The Office maintains that "[a]t the time the invention was made, it would 
have been obvious to a person of ordinary skill in the art to ensure that any piece of 
data downloaded was the most current". However, this assertion by the Office 
provides no assistance in light of Gupta as to the recited method of claim 20. 
Since Gupta does not teach or suggest "expiring cookies identified by responses to 
the get image requests" it would not have been obvious to combine the Office's 
assertion. 

Accordingly, Gupta in view of the Office's assertion does not show every 
element of claim 20 and the rejection of claim 20 is therefore improper. 
Accordingly, Applicants respectfully request that the §103 rejection of claim 20 be 
withdrawn. 

Dependent claim 21 depends from claim 1 8, and therefore comprises the 
element "expiring cookies identified by responses to the get image requests". 

As discussed above in support of claims 1 and 7, Gupta fails to retiring 
cookies, since doing so would defeat the teachings of Gupta to use a cookie to 
validate a user to a server. Without the cookie, as taught by Gupta, the user would 

i 

not be able to perform a logout from the server. 

The Office takes Official Notice "including a query in an image tag in a 
computer networking environment was well known in the art at the time the 
invention was made". However, the Official Notice taken provides no assistance 
in light of Gupta as to the recited method of claim 21 . Since Gupta does not teach 
or suggest '^retiring cookies identified by responses to the get image requests" it 
would not have been obvious to combine the Official Notice taken by the Office. 
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Accordingly, Gupta in view of Official Notice does not show every element 
of claim 21 and the rejection of claim 21 is therefore improper- Accordingly, 
Applicants respectfully request that the §103 rejection of claim 21 be withdrawn. 

Claims 29-32 are rejected for the same reasons as set forth in the rejection 
of claims 18, 20, and 2L Applicants assert the arguments as presented in support 
of claims 18, 20, and 21, in support of claims 29-32. 

Accordingly, Gupta in view of Wu, Office's assertion, and Official notice 
does not show every element of claims 29-32 and the rejection of claims 29-32 is 
therefore improper. Accordingly, Applicants respectfully request that the §103 
rejection of claims 29-32 be withdrawn. 
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CONCLUSION 

All pending claims 1-40 are in condition for allowance. Applicant 
respectfully requests reconsideration and prompt issuance of the subject 
application. If any issues remain that prevent issuance of this application, the 
Examiner is urged to contact the undersigned attorney before issuing a subsequent 
Action. 



Dated: 




Respectfully Submitted, 



By. 




Emmanuel A. Rivera 
Reg. No. 45,760 
(509) 324-9256 ext. 245 
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